5818 matches found
Race condition
Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2020-11152: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2020-14098
The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version 1.0.336 and Xiaomi route RM1800 root version 1.0.26...
Design/Logic Flaw
The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version 1.0.336 and Xiaomi route RM1800 root version 1.0.26...
CVE-2020-14098
The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version 1.0.336 and Xiaomi route RM1800 root version 1.0.26...
CVE-2020-14098: Improper Synchronization
The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version 1.0.336 and Xiaomi route RM1800 root version 1.0.26...
PT-2021-9688
Name of the Vulnerable Software and Affected Versions Xiaomi router AX1800 rom versions prior to 1.0.336 Xiaomi router RM1800 root versions prior to 1.0.26 Description The issue allows the login verification to be bypassed due to a problem with time synchronization after the router restarts...
[SECURITY] [DLA 2515-1] csync2 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2515-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb January 04, 2021 https://wiki.debian.org/LTS -...
ASB-A-169933423
In isdevicelocked and setdevicelocked of keystorekeymasterenforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not...
Rust futures-util crate security vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in futures-util crate before 0.3.2 for Rust, which stems from the fact that FuturesUnordered may result in data corruption due to improper synchronization handling...
CVE-2020-35897: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race...
CVE-2020-35886: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race...
CVE-2020-35928: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache data race by sending types that do not implement Send/Sync...
CVE-2020-35912: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the lockapi crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockWriteGuard unsoundness...
CVE-2020-27837: Concurrent Execution using Shared Resource with Improper Synchronization
A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessing their session without authentication. This is similar to CVE-2017-12164, but requires more...
The vulnerability of the Ansible configuration management system, related to synchronization errors when using a shared resource, allows a perpetrator to escalate their privileges and execute arbitrary code.
The vulnerability of the Ansible configuration management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...
The vulnerability of the Junos operating system arises from synchronization errors when using shared resources, allowing a attacker to trigger an extended denial-of-service attack.
The vulnerability of the Multiservices PIC Management Daemon mspmand implementation in the Junos operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to initiate an extended denial-of-service attack from a...
Philips Hue Resource Management Error Vulnerability
Philips Hue is a smart lighting device from the Chinese company Philips. A security vulnerability exists in Philips Hue, the vulnerability stems from a SYN flood sent on tcp port 80 will freeze the Philips Hue's hub and it will stop responding...
openGauss: Configuring an NTP Server
The Network Time Protocol NTP is used to synchronize time between clients and servers on the network. By configuring an NTP, you can synchronize the clock of a PC to the Coordinated Universal Time UTC and synchronize system clocks of multiple OSs. Copyright C 2020 Greenbone Networks GmbH Some tex...
PT-2020-17627 · Rust · V9 Crate
Name of the Vulnerable Software and Affected Versions: v9 crate through 2020-12-18 Description: An issue was discovered in the v9 crate, where affected versions unconditionally implement Sync for SyncRef. This definition allows data races if &T is accessible through &SyncRef. The SyncRef derives...